Start for Free
npm

jsrsasign

View on npm registry
14 Total advisories
14 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 7.4
npm

CVE-2026-4600

jsrsasign: DSA signatures or X.509 certificates can be forged via DSA domain-parameter validation in KJUR.crypto.DSA.setPublic
HIGH 7.5
npm

CVE-2026-4602

jsrsasign: Negative Exponent Handling Leads to Signature Verification Bypass
CRITICAL 9.1
npm

CVE-2026-4599

jsrsasign: Incomplete Comparison Allows DSA Private Key Recovery via Biased Nonce Generation
HIGH 7.5
npm

CVE-2026-4598

jsrsasign is vulnerable to DoS through Infinite Loop when processing zero or negative inputs
MEDIUM 5.9
npm

CVE-2026-4603

jsrsasign: Division by Zero Allows Invalid JWK Modulus to Cause Deterministic Zero Output in RSA Operations
HIGH 8.7
npm

CVE-2026-4601

jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction
HIGH 8.6
npm

CVE-2022-25898

JWS and JWT signature validation vulnerability with special characters
HIGH 7.5
npm

CVE-2024-21484

Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
CRITICAL 9.1
npm

CVE-2021-30246

RSA signature validation vulnerability on maleable encoded message in jsrsasign
CRITICAL 9.8
npm

CVE-2020-14968

RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
CRITICAL 9.8
npm

CVE-2020-14967

RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
HIGH 7.5
npm

CVE-2020-14966

ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
UNKNOWN
npm

GHSA-h87q-g2wp-47pj

Signatures are mistakenly recognized to be valid in jsrsasign
MEDIUM 5.9
npm

GHSA-g753-jx37-7xwh

ECDSA signature vulnerability of Minerva timing attack in jsrsasign

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes